OBB study plan

Map the regulatory architecture (primary legislation, subsidiary rules, supervisory guidance) and label each source by binding force

Define the supervisory body's mandate, powers, and intervention ladder in your own words

Distinguish authorization, registration, and licensing routes and list the conditions attached to each

Identify the reporting obligations a firm owes to its supervisor and note the trigger, frequency, and deadline for each

Translate each supervisory requirement from week 1 into a corresponding internal control or governance mechanism

Explain the three lines of defense and assign named responsibilities to each line for a sample firm

Outline board and senior management duties, including fitness-and-propriety expectations and delegation limits

Draft the core elements of a compliance monitoring program: scope, frequency, sampling, escalation, and remediation tracking

Build a risk taxonomy covering credit, market, liquidity, operational, conduct, and compliance risk with a one-line definition for each

Apply a risk assessment method (likelihood x impact) to rank at least 10 identified risks

Design an internal control testing approach that distinguishes design effectiveness from operating effectiveness

Specify the escalation path and remediation timeline for a control failure, including who is notified and when

Describe how risk appetite statements cascade into business-level limits

Map the customer lifecycle from onboarding through offboarding and name the control point at each stage

Apply customer due diligence and enhanced due diligence triggers to three worked scenarios

Explain product suitability and appropriateness assessments and where each applies

Outline complaint handling and redress procedures, including timelines and record retention

Identify the disclosure items a firm must give a customer before, at, and after sale

Classify the main product types covered by the syllabus and state the risk profile and typical customer of each

Explain pricing, fee, and cost disclosure mechanics for at least three product categories

Describe the key features, risks, and regulatory treatment of the products most likely to be tested

Compare two products on liquidity, capital treatment, and investor protection

Identify mis-selling risk factors and the controls that mitigate them

State the core conduct standards (fair treatment, integrity, conflicts of interest, confidentiality) and give a concrete breach example of each

Analyze three conflicts-of-interest scenarios and prescribe the required disclosure, avoidance, or management action

Explain market abuse concepts including insider dealing, market manipulation, and unlawful disclosure, with indicators for each

Apply whistleblowing and escalation duties to a hypothetical misconduct case

Distinguish personal account dealing rules from firm-level trading restrictions

List the categories of records a firm must maintain and set a retention period against each

Explain the difference between regulatory reporting, public disclosure, and customer disclosure and give an example of each

Draft a sample regulatory notification for a specified event, including content, format, and deadline

Trace how a recordkeeping failure becomes an enforcement risk under the supervisory framework

Identify data protection and confidentiality limits on record handling

Consolidate all weekly deliverables into a single indexed reference set organized by domain

Complete two timed mock exams and score each domain separately

Diagnose the two weakest domains and re-study only the specific objectives missed

Recite from memory the key definitions, thresholds, and deadlines for each domain

Build a final one-page cram sheet limited to facts you can state without notes